CVE-2022-28886: Denial-of-Service (DoS) Vulnerability

Published Sep 23, 2022

Updated

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine

Affected Software

5 affected components

F-Secure Cloud Protection For Salesforce

F-Secure Collaboration Protection

F-Secure Elements Endpoint Protection Windows

F-Secure Internet Gatekeeper

F-Secure Linux Security

Remediation

Information

FIX No User action is required. The required fix has been published through automatic update channel with Capricorn database on 2022-09-13_07

Event History

Sep 23, 2022

CVE Published

via MITRE·06:24 PM

Data Sourced

via MITRE·06:24 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this Denial-of-Service vulnerability?

The vulnerability ID of this Denial-of-Service vulnerability is CVE-2022-28886.

Which products are affected by this vulnerability?

The F-Secure and WithSecure products affected by this vulnerability include F-secure Cloud Protection For Salesforce, F-secure Collaboration Protection, F-secure Elements Endpoint Protection, F-secure Internet Gatekeeper, and F-Secure Linux Security.

What is the severity rating of CVE-2022-28886?

The severity rating of CVE-2022-28886 is medium, with a severity value of 5.5.

How can this vulnerability be exploited?

This vulnerability can be exploited by causing the aerdl.so/aerdl.dll file to go into an infinite loop when unpacking PE files, which may crash the scanning engine.

Are there any references for this vulnerability?

Yes, you can find references for this vulnerability at the following URLs: - F-Secure Security Advisories: https://www.f-secure.com/en/business/support-and-downloads/security-advisories - WithSecure Security Advisories: https://www.withsecure.com/en/support/security-advisories